I finally got acid working correctly and I see all these fun attacks coming in but there is one thing that I dont quite understand.
Under my Destination IP address I saw 2 IPs.. hmm I only have one IP so I went in to look at it and sure enough there was another IP address in there. I clicked on the number of attacks and it looks like Im sending out attacks to him....
Quote:
ID #1-(1-4)
< Signature > [snort] ATTACK-RESPONSES 403 Forbidden
< Timestamp > 2005-01-06 14:39:02
< Source Address > My IP:80
< Dest. Address > His IP:1591
< Layer 4 Proto > TCP
|
As you can see the source address is me sending out....My worst fear is that my box has already been comprimised and Im scanning other addresses.
Thank you
Ryan